CWE-242

Use of Inherently Dangerous Function

High

Description

The product calls a function that can never be guaranteed to work safely.

Potential Impact

Other: Varies by Context

How to Fix

Implementation

Ban the use of dangerous functions. Use their safe equivalent.

Testing

Use grep or static analysis tools to spot usage of dangerous functions.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-242 vulnerabilities in your codebase.

Get Security Assessment